"Any from Firebox-00" traffic still logged even if checkbox is unchecked in diagnostic setup

Flo_ParisFlo_Paris
in Firebox - Dimension, Logging and Reporting

Hello,

My firewall is sending a lot of "useless" logs to my splunk instance and i tried to remove it without success (to reduce the future needed daily indexed license...).

Any idea of what i could have missed ?

Thanks,

Florent

Comments

  • Flo_ParisFlo_Paris
    edited July 2021

    NB : setup / logging / Diagnostic log level / "Enable Logging from traffic sent from this device" has been unchecked.

  • Flo_ParisFlo_Paris

    Seems that the second checkbox did the job : "Enable logging for reports for traffic sent from this device (Fireware OS version 11.10.5 and higher)".

  • Flo_ParisFlo_Paris

    remaining question : what is the goal of the first checkbox then ?

  • Bruce_BriggsBruce_Briggs

    Traffic Monitor only - not for reports

Sign In to comment.